Legal

Stellar is a free, open-source hobby project. It is operated by:

The source code for both the website and the command-line tool is public at github.com/a3chron/stellar.

The short version: you can browse this site and install themes with the CLI without an account and without telling us anything about yourself. An account is needed only to publish themes, and the data it holds is what is required to run that account — nothing is sold, and nothing is used for advertising or profiling.

Browsing without an account

No account is required to browse themes, read the documentation, or apply a theme with the CLI. Visiting the site sets no advertising or tracking cookies.

Account data

If you create an account, we store: your email address, your username (the handle your themes are published under), a display name, and — if you provide them — an avatar image, a short bio, and links to your GitHub profile or website. Bio and links are optional and are shown publicly on your profile page.

Legal basis: Art. 6(1)(b) GDPR — processing necessary to provide the service you signed up for.

How you sign in

• Email and password: your password is stored only as a salted cryptographic hash. We never store or can read the password itself.
• GitHub, GitLab or Google: we receive your username or name, your email address, and your avatar image from the provider you choose. We store the access and refresh tokens the provider issues so the connection keeps working. We never receive your password, and we do not use these tokens to access your repositories or any other data — the permissions requested are read-only profile access.

Sessions and security

While you are signed in, we store a session record containing a session token, your browser's user-agent string, and a one-way keyed digest of your IP address. We do not store the IP address itself — the digest lets us notice that a session is being used from somewhere unusual without keeping the address on file, and it cannot be turned back into your IP from the database. This keeps you signed in and makes account misuse detectable. Sessions expire automatically. An essential cookie holds the session token; it is required for logging in and is not used for tracking.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating a secure service.

To limit abuse of the download counter and the username lookup, the same one-way keyed digest is held in memory for a short window. The raw address is not written to disk.

Themes you publish

Themes are public by design. The configuration file, name, description, version notes, screenshot, and the username of the author are visible to everyone and are served through the public API to the CLI. Do not put anything private into a theme configuration or a screenshot.

Email

We send email only for address verification and password resets. There is no newsletter and no marketing email. Delivery is handled by Resend.

CLI usage statistics

The command-line tool sends one anonymous report on its first run, again after a version change, and once on uninstall. It contains a random install identifier generated on your own machine, whether the install was new or pre-existing, the CLI version and the previously reported version, and your operating system and CPU architecture.

It contains nothing else: no IP address is stored, and no theme names, file paths, or usernames are transmitted. There is no periodic ping. You can switch it off entirely by setting STELLAR_NO_TELEMETRY=1 or the cross-tool DO_NOT_TRACK=1 in your shell configuration, and deleting the install id from ~/.config/stellar/config.json resets it.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in knowing roughly how many installs exist and which versions are in use.

Analytics

This site uses Vercel Web Analytics and Vercel Speed Insights to measure page views and loading performance in aggregate. These do not set cookies and do not track you across other websites.

Service providers

We use the following processors, each only for the purpose listed:

• Vercel — website hosting and analytics
• Supabase — database and storage for screenshots and avatars
• Resend — sending verification and password reset email
• GitHub, GitLab, Google — only if you choose that provider to sign in

Some of these providers operate infrastructure outside the European Union, including in the United States. Such transfers are based on the European Commission's standard contractual clauses or an adequacy decision.

How long data is kept

• Account data: until you delete your account, which you can do yourself at any time from your settings.
• Published themes: until you delete them. Deleting your account deletes your themes as well.
• Sessions: until they expire or you sign out.
• CLI install records: until the install reports an uninstall, or until we no longer need them.

Your rights

Under the GDPR you have the right to access your data, to have inaccurate data corrected, to have your data deleted, to restrict or object to processing, and to receive your data in a portable format. Where processing is based on consent, you may withdraw it at any time with future effect.

You can exercise most of these yourself: edit your profile, delete individual themes, or delete your account outright from your settings page. Deleting your account immediately removes your profile, your sign-in methods, every theme you published together with all of its versions, and the associated images. For anything else, write to the address above.

You also have the right to complain to a data protection supervisory authority.

By using Stellar you agree to the following. If you do not agree, please do not use the service.

The service

Stellar is a free hobby project that lets people share and install Starship prompt configurations. It is provided as-is, with no guarantee of availability, and it may change or shut down at any time. There is no paid tier and no service level agreement.

Your account

• You are responsible for what happens under your account. Keep your password and connected accounts secure.
• Provide an email address you actually control.
• You must be at least 16 years old to create an account, or have the consent of a parent or guardian.
• Do not impersonate someone else or pick a username intended to suggest an affiliation you do not have.

Content you upload

You keep ownership of the themes and screenshots you publish. By publishing, you grant us the non-exclusive, worldwide, royalty-free right to store, display, and distribute that content through this website and its API, including to the CLI — this is simply what is needed to host it and let others install it. You can withdraw this by deleting your theme, though copies already downloaded by others remain on their machines.

You may only upload content you created or otherwise have the right to publish.

What you must not upload

• Anything unlawful, or content that infringes someone else's copyright or trademark.
• Sexual or pornographic imagery, graphic violence, or shock content. Screenshots should show a terminal prompt — that is what the field is for.
• Hateful, harassing, or discriminatory content, including in theme names, descriptions, and usernames.
• Configurations that do anything harmful when a prompt is rendered. Starship configurations can define custom modules that execute shell commands. Any theme whose commands exfiltrate data, download or execute remote code, modify files outside the prompt, or otherwise do something a user would not expect from a prompt will be removed, and the account behind it suspended.
• Advertising, spam, or content whose purpose is to drive traffic elsewhere.

Moderation

We may remove any theme, screenshot, or account that breaks these terms, or that we reasonably believe to be harmful — with or without notice, and at our discretion. If you find content that breaks these rules, please report it to the contact address above.

Liability

Themes are written by other users, not by us. We do not review every configuration before it appears, and we give no warranty that a theme is safe, correct, or fit for any purpose — you install community configurations at your own risk, and you are encouraged to read a configuration before applying it.

To the extent permitted by law, we are not liable for damages arising from the use of this service, except for damages caused intentionally or by gross negligence, and except for liability that cannot be excluded by law, such as under the German Product Liability Act or for injury to life, body, or health.

Changes

These terms and the privacy policy may change as the project develops. The date at the top of this page shows when it was last revised. Significant changes affecting account holders will be announced by email or on the site.

Governing law

German law applies, without prejudice to any mandatory consumer protection rules of the country you live in.